CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

www/node 24.22.1

V8 JavaScript for client and server (meta port)

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 24.21.0_3, update to 24.22.1 not built yet
Upstream
up to date
Last update
to 24.22.1 · ba74741313
Quarterly
2026Q4: 24.21.0_3 · last MFH 5355d058d8
Formerly
www/node7 until 2016-12-07, www/iojs until 2015-09-23
WWW
https://nodejs.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install node
installs 24.21.0_3 from latest; from quarterly (2026Q4) 24.21.0_3
Port
# cd /usr/ports/www/node && make install clean
Size
1.2 KiB download · 243 B installed
Depends on
www/node24 24.21.0_3
License
NA

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1624.21.0_324.21.0_3–
FreeBSD 1524.21.0_324.21.0_3–
FreeBSD 1424.21.0_324.21.0_324.21.0_3

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1524.21.0_324.21.0_3–
FreeBSD 1424.21.0_324.21.0_324.21.0_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 24.21.0_3 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (1)

Listed in VuXML, the packaged version 24.21.0_3 is still in the affected range; pkg audit reports it. What does this mean?

Fixed (30)

Show 30 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (436)

Bradley T. Hughes (bhughes) · 9.4.0
www/node: Update 9.3.0 -> 9.4.0

https://nodejs.org/en/blog/release/v9.4.0/

While here, pet portlint:
- move ONLY_FOR_ARCHS
- remove USES_LDCONFIG (node.js doesn't install a .so)

Approved by:	mat (co-mentor)
Differential Revision:	https://reviews.freebsd.org/D14050
d7aeb3c3a0
Bradley T. Hughes (bhughes) · 9.3.0
www/node: Update 9.2.1 -> 9.3.0

https://nodejs.org/en/blog/release/v9.3.0/

Approved by:	mat (co-mentor)
Differential Revision:	https://reviews.freebsd.org/D13495
972ecb18dc
Bradley T. Hughes (bhughes) · 9.2.1
www/node: Update 9.2.0 -> 9.2.1

Approved by:	mat (co-mentor)
Security:	bea84a7a-e0c9-11e7-b4f3-11baa0c2df21
Differential Revision:	https://reviews.freebsd.org/D13443
e4b5eef5dd
Bradley T. Hughes (bhughes) · 9.2.0
www/node: Update 9.1.0 -> 9.2.0

https://nodejs.org/en/blog/release/v9.2.0/

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D13166
829e850392
Jan Beich (jbeich) · 9.1.0_1
devel/icu: update to 60.1

Changes:	http://site.icu-project.org/download/60
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		223373
Exp-run by:	antoine
99b0558e42
Bradley T. Hughes (bhughes) · 9.1.0
www/node: Update 9.0.0 -> 9.1.0

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D13005
ab29e0c442
Bradley T. Hughes (bhughes) · 9.0.0
www/node: Update 8.8.1 -> 9.0.0

Update to the latest major version of Node.js.

https://nodejs.org/en/blog/release/v9.0.0/

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D12974
44ea3d95ff
Bradley T. Hughes (bhughes) · 8.8.1
www/node8: copy from www/node, update 8.8.1 -> 8.9.0 (LTS)

Create a new port for the latest Node.js 8.9.0 LTS release. Update
CONFLICTS for the existing Node.js ports to include the new node8 port
and remove non-existent ports.

https://nodejs.org/en/blog/release/v8.9.0/

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D12930
b04247ef05
Bradley T. Hughes (bhughes) · 8.8.1
www/node: Update 8.8.0 -> 8.8.1

Update to address a regression in 8.8.0.

https://nodejs.org/en/blog/release/v8.8.1/

Approved by:	robak (mentor)
MFH:		2017Q4
Differential Revision:	https://reviews.freebsd.org/D12800
684d6cf017
Bradley T. Hughes (bhughes) · 8.8.0
www/node: Update 8.6.0 -> 8.8.0

Update to the latest upstream v8.x release to address a remote DoS
vulnerability.

https://nodejs.org/en/blog/vulnerability/oct-2017-dos/
https://nodejs.org/en/blog/release/v8.8.0/

Remove post-patch rules to replace various occurrences of 'python' with
PYTHON_CMD. Upstream has done a change to ensure that the "correct"
python version is called at build time, making our post-patch steps
unnecessary.

Re-roll patches with 'make makepatch'.

Approved by:	robak (mentor)
MFH:		2017Q4
Security:	CVE-2017-14919
Differential Revision:	https://reviews.freebsd.org/D12689
0cd7e38e91
Mark Linimon (linimon) · 8.6.0
For ports that are explicitly enabled on armv6, also enable them on armv7.  This has not been tested with an -exp run but should "do no harm".

PR:		221894 (partial)
3ef3461740
Bradley T. Hughes (bhughes) · 8.6.0
www/node: Update 8.5.0_1 -> 8.6.0

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D12532
bb86bdab8a
Jan Beich (jbeich) · 8.5.0_1
devel/icu: update to 59.1

- Temporarily keep C++98 working in consumers for Clang's default -std=

Changes:	http://site.icu-project.org/download/59
PR:		218788
Submitted by:	takefu@airport.fm, dcarmich@dcarmichael.net (early version)
Exp-run by:	antoine
a382198617
Mathieu Arnold (mat) · 8.5.0
Remove USES=execinfo.

PR:		220271
Submitted by:	mat (review), Yasuhiro KIMURA (PR)
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D11488
3fcd0e41de
Bradley T. Hughes (bhughes) · 8.5.0
www/node: Update 8.4.0_1 -> 8.5.0

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D12369
172a401d99
Gerald Pfeifer (gerald) · 8.4.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Bradley T. Hughes (bhughes) · 8.4.0
www/node: Update 8.3.0 -> 8.4.0

Use DTRACE_CONFIGURE_ON to add --with-dtrace to the configure arguments
when DTRACE is enabled.

Approved by:	mat (co-mentor)
Differential Revision:	https://reviews.freebsd.org/D12045
12033e1872
Bradley T. Hughes (bhughes) · 8.3.0
www/node: Update 8.2.1 -> 8.3.0

- Revert libc++ workaround from r444555, since upstream has fixed the
  issue differently.
- Refresh patches with 'make makepatch'

Approved by:	mat (co-mentor)
Differential Revision:	https://reviews.freebsd.org/D11949
5a13f31f84
Bradley T. Hughes (bhughes) · 8.2.1
www/node: Update 8.1.4 -> 8.2.1

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D11720
c475613a4d
Bradley T. Hughes (bhughes) · 8.1.4
www/node: Update 8.1.3 -> 8.1.4

Approved by:	mat (co-mentor)
MFH:		2017Q3
Security:	3eff66c5-66c9-11e7-aa1d-3d2e663cef42
Differential Revision:	https://reviews.freebsd.org/D11580
4101085886
Andrew Turner (andrew) · 8.1.3
www/node: Build on arm64

DTrace fails to build, however there is no userspace DTrace support on
arm64 for it to use.

PR:		220282
Approved by:	bhughes (maintainer), matthew
7b25124de6
Bradley T. Hughes (bhughes) · 8.1.3
www/node: Update 8.1.2 -> 8.1.3

- Pet portlint (trailing whitespace)

Approved by:	robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D11402
e3357f24cb
Bradley T. Hughes (bhughes) · 8.1.2
www/node: Update 7.10.0 -> 8.1.2

Bump to the latest major version of Node.js.

Remove files/patch-node.gyp, since this patch has been accepted
upstream. Remove
files/patch-deps_v8_src_base_atomicops__internals__arm__gcc.h,
which patches a now non-existent file after a change in how V8
implements atomic operations. Conditionally add the
_LIBCPP_TRIVIAL_PAIR_COPY_CTOR define when using clang 3.x to
workaround a known problem in libc++.

Approved by:    robak (mentor)
Differential Revision:	https://reviews.freebsd.org/D11030
b24a67761e
Mark Linimon (linimon) · 7.10.0
Sort ARCHS.  Pet portlint.

Approved by:	portmgr (tier-2 blanket)
c814970936
Bradley T. Hughes (bhughes) · 7.10.0
multiple ports: Update MAINTANER

Change bradleythughes@fastmail.fm -> bhughes@FreeBSD.org after
receiving my ports commit bit on all ports I maintain: devel/awscli,
devel/py-botocore, net/py-s3transfer, net/turnserver, www/node4,
www/node6, and www/node.

Approved by:	robak (mentor)
Differential Review:	https://reviews.freebsd.org/D11015
956e24e47d
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.10.0
Update to 7.10.0

- Regenerate patch file with makepatch:

Changes:	https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V7.md
PR:		219193
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
f6efe9a5c9
Thomas Zander (riggs) · 7.9.0
Update to upstream version 7.9.0, fix build on armv6

PR:		218081, 218643
Submitted by:	mikael.urankar@gmail.com,
		bradleythughes@fastmail.fm (maintainer)
Approved by:	bradleythughes@fastmail.fm (maintainer)
60dd53d189
Gerald Pfeifer (gerald) · 7.8.0_1
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
04d6f52202
Vanilla I. Shu (vanilla) · 7.8.0
Update to 7.8.0.

PR:		218209
Submitted by:	maintainer
e4078c11e3
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.7.4
Update to 7.7.4

Changes:	https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V7.md
PR:		218047
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
5fc6d07bc2
Thomas Zander (riggs) · 7.7.3
Update to upstream version 7.7.3

PR:		217820
Submitted by:	bradleythughes@fastmail.fm (maintainer)
00f1c7bcaa
Dmitry Marakasov (amdmi3) · 7.7.2
- Update to 7.7.2

PR:		217669
Submitted by:	bradleythughes@fastmail.fm (maintainer)
49c1a90d13
Bartek Rutkowski (robak) · 7.7.1
www/node: update 7.6.0 -> 7.7.1

PR:		217580
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
822ffff9ba
Kirill Ponomarev (krion) · 7.6.0
Update www/node to 7.6.0

PR:		217331
Submitted by:	maintainer
Differential Revision:	https://reviews.freebsd.org/D9792
4988fbe816
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.5.0_3
Use bundled CA store only when BUNDLED_SSL enabled

- Bump PORTREVISION for dependency change

PR:		217096
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
f117075e66
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.5.0_2
Enable BUNDLED_SSL by default only on FreeBSD 10

- Add UPDATING entry
- Bump PORTREVISION for dependency change

PR:		217095
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
d7a344d8c1
Tijl Coosemans (tijl) · 7.5.0_1
- Remove inclusion of bsd.default-versions.mk from ftp/curl/Makefile so   bsd.default-versions.mk can rely on ARCH being defined. - In bsd.port.mk move inclusion of bsd.default-versions.mk from the   pre-makefile section to the options section so the variables can be used   earlier.  Also put the bit of code sitting between the options section and   the pre-makefile section into the options sectio

PR:		215996
Exp-run by:	antoine
Approved by:	portmgr (antoine)
6d324c1f70
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.5.0
Update to 7.5.0

Changes:	https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V7.md
PR:		216795
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
02b4c74ba6
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.4.0
Update to 7.4.0 [1]

- Fix build on ARMv6 [2]
- While I'm here, remove duplicate PLIST_SUB which is already handled by OPTIONS_SUB=yes

Changes:	https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V7.md
		https://nodejs.org/en/blog/release/v7.4.0/
PR:		215775 [1], 215044 [2]
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer) [1],
		Peter Laursen <plaursen@kobalt.dk> [2]
9c328055d5
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.3.0
Remove OPTIONS_EXCLUDE_FreeBSD_9

Approved by:	portmgr (blanket)
5e8adb6941
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.3.0
- Update to 7.3.0

Changes:	https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V7.md
		https://nodejs.org/en/blog/release/v7.3.0/
PR:		215460
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
541e251fd7
Mathieu Arnold (mat) · 7.2.1
Remove emulation of OPTIONS_EXCLUDE_${OPSYS}_${OSREL:R}, it is a thing now.

Sponsored by:	Absolight
353bd5528b
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.2.1
- Unbreak this port

% make fetch-urlall-list
http://nodejs.org/dist/v7.2.1/node-v7.2.1.tar.gz
http://distcache.FreeBSD.org/ports-distfiles/node-v7.2.1.tar.gz

% fetch http://nodejs.org/dist/v7.2.1/node-v7.2.1.tar.gz
resolved
node-v7.2.1.tar.gz                            100% of   26 MB   26 MBps 00m01s

% sha256 node-v7.2.1.tar.gz
SHA256 (node-v7.2.1.tar.gz) = fd08b8ba43b0596a7160b09a37113ac03b4b0976ec7e48980b7b8c078aa51b02

% fetch http://distcache.FreeBSD.org/ports-distfiles/node-v7.2.1.tar.gz
resolved
node-v7.2.1.tar.gz                            100% of   26 MB   25 MBps 00m01s

% sha256 node-v7.2.1.tar.gz
SHA256 (node-v7.2.1.tar.gz) = fd08b8ba43b0596a7160b09a37113ac03b4b0976ec7e48980b7b8c078aa51b02
66b7c773b3
Mathieu Arnold (mat) · 7.2.1
Does not fetch:

=> Attempting to fetch http://nodejs.org/dist/v7.2.1/node-v7.2.1.tar.gz
fetch: http://nodejs.org/dist/v7.2.1/node-v7.2.1.tar.gz: Unknown HTTP error
=> Attempting to fetch http://distcache.FreeBSD.org/ports-distfiles/node-v7.2.1.tar.gz
fetch: http://distcache.FreeBSD.org/ports-distfiles/node-v7.2.1.tar.gz: size mismatch: expected 27585984, actual 2596617

Sponsored by:	Absolight
aae4d6ed99
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.2.1
- Update to 7.2.1

Changes:	https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V7.md
		https://nodejs.org/en/blog/release/v7.2.1/
PR:		215166
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
cc2bdafaac
Adam Weinberger (adamw) · 7.2.0
Move www/node7 to www/node, and add an entry for the move into MOVED. When node becomes node8 and node7 gets branched, the MOVED entry will need to be removed.

PR:		213948
Approved by:	maintainer (Bradley T. Hughes)
8aeb9fbde9
Adam Weinberger (adamw) · 7.2.0
Remove www/node in preparation for moving node7 into its place. Update the CONFLICTS lines for the node ports at the same time.

PR:		213948
Approved by:	maintainer (Bradley T. Hughes)
6413a5b423
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.2.0 · as www/node7
- Update to 7.2.0

Changes:	https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V7.md
		https://nodejs.org/en/blog/release/v7.2.0/
PR:		214928
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)
2d118b385f
Steve Wills (swills) · 7.1.0_1 · as www/node7
www/node7: add dtrace option and enable by default

Approved by:	bradleythughes@fastmail.fm (maintainer)
479ede17cd
Steve Wills (swills) · 6.9.1_2
www/node: add dtrace option and enable by default

Approved by:	bradleythughes@fastmail.fm (maintainer)
db4a1718d2